Network Engineer
Ensure secure, reliable, and performant enterprise and plant (OT) network connectivity across Curium sites and cloud platforms. Operate and improve LAN/WAN/SD‑WAN, wireless, remote access/VPN, firewalls, load balancers, DNS/DHCP/IPAM, and network monitoring, following approved change, incident, and problem processes. Participate in projects to deliver network changes and migrations, and take part in the on‑call rotation to support 24×7 critical services within defined SLAs.
Job description:
Summary of Position
Ensure secure, reliable, and performant enterprise and plant (OT) network connectivity across Curium sites and cloud platforms. Operate and improve LAN/WAN/SD‑WAN, wireless, remote access/VPN, firewalls, load balancers, DNS/DHCP/IPAM, and network monitoring, following approved change, incident, and problem processes. Participate in projects to deliver network changes and migrations, and take part in the on‑call rotation to support 24×7 critical services within defined SLAs.
Essential Functions
- Monitor and operate global network services (LAN, WAN/SD-WAN, Wi‑Fi, remote access/VPN, firewalls, proxies, DNS/DHCP/IPAM) across data centers, sites, and Azure cloud.
- Run day‑to‑day on Fortinet NGFW/SD‑WAN, Cisco switching/wireless, and Azure networking (VNets, VPN/ExpressRoute, Azure Firewall/NVA).
- Own L2 troubleshooting for incidents and performance degradations; drive root‑cause analysis and contribute to post‑incident reviews.
- Implement approved changes and releases; maintain configuration baselines, backups, and standard builds.
- Provision and maintain network access (VLANs, ACLs, firewall rules, site‑to‑site VPNs, NAC/802.1X) in line with security standards.
- Operate and tune monitoring/observability (SNMP, Syslog, NetFlow/sFlow, telemetry); publish availability, latency, and capacity KPIs.
- Create and maintain runbooks, diagrams, and inventory (IPAM); keep documentation audit‑ready.
- Coordinate with providers/MSPs and carriers for circuits and managed services; track service quality and elevate per OLAs.
- Support DR/BCP network readiness, failover testing, and resilience improvements.
- Contribute to project delivery: requirements, design input, test plans, pilot/rollout/migration support, and cutover readiness.
- Automate repetitive tasks (Python/PowerShell/Ansible) and propose continuous improvements.
- Participate in the on‑call rota; respond to major incidents, provide timely comms/handovers, and meet response/restore SLAs.
Requirements
Must have Experience/Skills
- 3–5+ years in network operations supporting multi‑site enterprise environments.
- Hands‑on with Cisco routing/switching (BGP, OSPF, VRRP/HSRP, VLANs, STP) and Wi‑Fi.
- Fortinet firewalls and remote access: policies/objects, NAT, VPN (IPsec/SSL), segmentation/micro‑segmentation.
- Azure networking: VNets/subnets, route tables, network security groups, Azure Firewall/NVA, VPN/ExpressRoute.
- Network services: DNS, DHCP, NTP; IP addressing and IPAM discipline.
- Monitoring/observability tools (SNMP, Syslog, NetFlow) and packet analysis.
- Operating within ITIL processes for Incident, Problem, and Change; experience in CAB participation.
- Evidence of participation in an on‑call rotation and 24×7 support of critical services.
- Strong L2 troubleshooting, structured analysis, and clear communication to technical and non‑technical stakeholders.
- Documentation discipline (runbooks, diagrams) and adherence to security/quality standards.
- Collaboration mindset consistent with Curium values (Integrity, Commitment, Collaboration).
- English proficiency (written and spoken); French, Italian, Spanish is a plus.
Nice to have Experience/Skills
- Certifications: Cisco CCNA/CCNP, Fortinet NSE 4–7, Microsoft AZ‑700/Azure Network Engineer Associate.
- Network automation and infrastructure‑as‑code (Ansible, Terraform), CI/CD for network configurations.
- Zero Trust/SASE, NAC (802.1X), wireless site design; proxy/load‑balancer experience.
- Experience in regulated/GxP environments and audit readiness.
Education
- Bachelor’s degree in Computer Science, Information Technology, or equivalent experience. Relevant vendor or industry certifications preferred.